Passing WCF username AND PASSWORD to service handler

The correct way to do this in WCF is to implement IAuthorizationPolicy to replace PrimaryIdentity in the ServiceSecurityContext.

http://www.neovolve.com/post/2008/04/07/wcf-security-getting-the-password-of-the-user.aspx